mirror of
https://github.com/bensuperpc/infrastructure.git
synced 2024-12-22 08:44:28 +01:00
Improve security
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
This commit is contained in:
parent
33b68a1811
commit
340c1a1438
2
Makefile
2
Makefile
@ -13,7 +13,7 @@
|
||||
|
||||
DOCKER := docker
|
||||
|
||||
PROFILES := caddy wordpress adminer uptime-kuma qbittorrent gitea jellyfin watchtower backup syncthing openssh
|
||||
PROFILES := caddy wordpress gitea adminer uptime-kuma qbittorrent jellyfin watchtower backup syncthing openssh
|
||||
PROFILE_CMD := $(addprefix --profile ,$(PROFILES))
|
||||
|
||||
COMPOSE_FILES := $(shell find docker-compose*.yml | sed -e 's/^/--file /')
|
||||
|
@ -8,8 +8,8 @@
|
||||
}
|
||||
}
|
||||
|
||||
import bensuperpc.org/Caddyfile
|
||||
import bensuperpc.com/Caddyfile
|
||||
import bensuperpc.net/Caddyfile
|
||||
import bensuperpc.ovh/Caddyfile
|
||||
import bensuperpc.fr/Caddyfile
|
||||
import bensuperpc.org/*
|
||||
import bensuperpc.com/*
|
||||
import bensuperpc.net/*
|
||||
import bensuperpc.ovh/*
|
||||
import bensuperpc.fr/*
|
||||
|
@ -5,3 +5,15 @@ bensuperpc.net {
|
||||
www.bensuperpc.net {
|
||||
redir https://www.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
git.bensuperpc.net {
|
||||
redir https://git.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
jellyfin.bensuperpc.net {
|
||||
redir https://jellyfin.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
||||
uptimekuma.bensuperpc.net {
|
||||
redir https://uptimekuma.bensuperpc.org{uri} permanent
|
||||
}
|
||||
|
@ -20,19 +20,17 @@ services:
|
||||
- infra-network
|
||||
env_file:
|
||||
- env/caddy.env
|
||||
cap_add:
|
||||
- NET_ADMIN
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
# cap_drop:
|
||||
# - ALL
|
||||
# cap_add:
|
||||
cap_drop:
|
||||
- ALL
|
||||
cap_add:
|
||||
# - CHOWN
|
||||
# - FOWNER
|
||||
# - DAC_OVERRIDE
|
||||
# - SETGID
|
||||
# - SETUID
|
||||
# - NET_BIND_SERVICE
|
||||
- NET_BIND_SERVICE
|
||||
healthcheck:
|
||||
test: pidof caddy || exit 1
|
||||
interval: 120s
|
||||
|
Loading…
Reference in New Issue
Block a user